Real-World Cases

What is Computer Forensics?

Since you may be considering becoming a computer forensic professional, the first question you want clarified is “what is computer forensics?” It is important to fully understand the computer forensics definition in order to determine if you would enjoy the field and be successful in it.

Computer forensics, also known as ‘digital forensics,’ is a term used to describe a new field that involves the intersection of digital evidence and the law. Computer forensics is the process of identifying, preserving, and analyzing data and technical items for evidence that will be used in court.

More About Computer Forensics and Forensic Examiners

Forensic examiners typically analyze data from personal computers, laptops, personal digital assistants, cell phones, servers, tapes, and any other type of media. This process can involve anything from breaking encryption, to executing search warrants with a law enforcement team, to recovering and analyzing files from hard drives that will be critical evidence in the most serious civil and criminal cases.

The forensic examination of computers, and data storage media, is a complicated and highly specialized process. The results of forensic examinations are compiled and included in reports. In many cases, examiners testify to their findings, where their skills and abilities are put to ultimate scrutiny.